Privacy Policy

This policy explains how ZazzyPants, LLC dba SquaresHQ.com (“SquaresHQ,” “we,” “us”) handles information collected through squareshq.com and related services (the “Service”).

There are two kinds of people in the Service. Hosts create an account and set up boards. Players claim squares on a host’s board and never create an account. What we collect differs for each, and is described separately below.

From hosts. When you sign in we store your email address, and — if you sign in with a third-party provider — the name and profile image that provider returns. We do not store passwords; sign-in is by emailed link or a third-party provider.

From players. When you claim squares on a board, we store the name and email address you enter, which squares you selected, and the time you claimed them. Your host may additionally mark whether you have paid them and record a payment handle you gave them (for example a Venmo username). This information is visible to the host of that board and to any additional administrators they have added.

Content hosts upload. Board logos, sponsor images, payment QR code images, and any rules, payout, or payment text a host writes. Uploaded images are stored with our hosting provider and are served publicly to anyone who can view that board.

Automatically. Standard server and analytics data such as IP address, browser type, pages visited, and approximate country. We use approximate country specifically to determine whether to request advertising (see section 6).

• To operate boards — recording claimed squares, computing winners, and showing hosts who has claimed what.
• To sign hosts in and keep them signed in.
• To send transactional email: sign-in links, claim confirmations, and replies to messages you send us.
• To protect the Service, including rate limiting and abuse prevention.
• To display advertising on public board pages, as described in section 6.

We do not sell personal information, and we do not use player email addresses for marketing. Claim confirmation emails are transactional and can be switched off entirely by the host of a board.

We share information with service providers who process it on our behalf:

• Vercel — hosting, analytics, and image storage
• Neon — database hosting (United States)
• Postmark — transactional email delivery
• Google — advertising on public board pages; also sign-in, where a host chooses it
• Microsoft — sign-in only, where a host chooses it

We also share information with hosts, as described in section 2: the host of a board can see the name, email, squares, and payment status of everyone who claimed on that board, and can export that list.

We may disclose information if required by law, or in connection with a merger, acquisition, or sale of assets.

• A session cookie that keeps hosts signed in.
• For password- or code-protected boards, a signed cookie recording that you entered the correct credential for that specific board.
• Your light/dark theme preference, stored in your browser.
• The claim tokens for squares you have claimed, stored in your browser so a board can show you which squares are yours without requiring an account.
• Cookies set by Google in connection with advertising, where advertising is served.

You can clear or block these through your browser. Clearing them will sign hosts out, and will stop a board from recognizing which squares are yours — though your claim remains intact and your host can still see it.

We display advertising from Google on public board pages. Google may use cookies and similar technologies to serve ads based on your visits to this and other sites. You can review and adjust the ad personalization Google applies at adssettings.google.com.

Advertising is requested only for visitors we determine to be in the United States. Visitors we determine to be elsewhere are served no advertising and no advertising scripts at all.

Board and entry data is kept for as long as the host keeps the board. When a host deletes a board, the squares, entries, and scoring history for that board are deleted with it. Host accounts are kept until the account is deleted. Backups and server logs may persist for a limited period after deletion.

Data is transmitted over encrypted connections and stored with reputable providers. Board passwords are stored hashed, never in plain text. No system is perfectly secure, and we cannot guarantee absolute security.

Note that entry codes for boards are stored and displayed in plain text by design — they exist to be shared freely, and are not a security control.

The Service is not directed to children, and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

You may request access to, correction of, or deletion of your personal information by contacting us. Players should note that the host of a board also controls that board’s entry list and can remove entries directly.

Residents of some US states — including California, Colorado, Connecticut, Texas, and Virginia — have additional rights regarding access, deletion, correction, and opting out of targeted advertising or the “sale” or “sharing” of personal information. To exercise any of these, contact us using the details below. We will not discriminate against you for exercising them.

We may update this policy. When we do, we will revise the date at the top of this page. Material changes will be reflected here before they take effect.

Questions or requests: contact us or write to ZazzyPants, LLC dba SquaresHQ.com, Cleveland, Ohio 44124.